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(54) Data scrambling and descrambting systenn 

(57) A system for providing scrambled content, 
comprising a control word generator, each control word 
including a control word identifier, a scrambler for pro- 
viding a stream of scrambled data packets, and an en- 
cryption device for providing entitlement control mes- 
sages (ECM's). One or more consecutive packets are 
scrambled using the same control word (CW). Each 
packet includes a control word identifier identifying the 
control word used. The ECM encryption device provides 
ECM's including a previous control word (CWp), a cur- 
rent control word (CWc) and a next control word (CW^). 
A system for descrambling scrambled content compris- 
es a descrambler for descrambling the scrambled con- 
tent and a decryption device for decrypting ECM's to ob- 
tain control words. The ECM decryption device delivers 



control words to the descrambler and the descrambler 
descrambles the data packets of the scrambled content 
using a control word having a control word identifier cor- 
responding with the control word identifier of the data 
packet to be descrambled. The system further compris- 
es a storage device for storing scrambled content and 
means to control play back of the stored content, going 
fast forward and going backwards. The system is pro- 
grammed to extract ECM's and to provide the ECM's to 
the ECM decryption device for decryption. The system 
is programmed to request the ECM decryption device 
to provide at least a next control word (CW^^) at play 
back or going fast forward, and to provide at least a pre- 
vious control word (CWp) and a current control word 
(CWq) at going backwards. 
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Description 

[0001] The invention relates to conditional access 
systems suitable for receiving apparatus provided with 
storage devices with large capacity. The invention spe- 
cifically relates to a system for providing scrambled con- 
tent according to the preamble of claim 1 and to a sys- 
tem for descrambling scrambled content according to 
the preamble of claim 3. 

[0002] Recently television receiving apparatus have 
been equipped with storage devices with large capacity 
allowing the users to store hours of video content. In this 
manner the user can create a "personal television" re- 
cording his favourite programs and the like. Such receiv- 
ing apparatus can be made as a television apparatus, 
a set-top box or the like. 

[0003] The content stored in the storage devices, 
such as large hard discs, can include scrambled content 
with conditional access, wherein control words are 
needed to descramble the content. Such storage devic- 
es allow going backwards through the scrambled con- 
tent, wherein however the presently available mecha- 
nisms for cycling control words become difficuft to use. 
Going backwards is necessary as the users would like 
to use a VCR-like rewind functionality. However the cur- 
rent techniques used for control word cycling are de- 
signed for signals that go forward only. 
[0004] The invention aims to provide a system for pro- 
viding scrambled content and a system for descram- 
bling scrambled content of the above-mentioned type, 
wherein a VCR-like rewind function is supported. 
[0005] According to the invention a system for provid- 
ing scrambled content, comprises a control word gen- 
erator, each control word including a control word iden- 
tifier, a scrambler for providing a stream of scrambled 
data packets, wherein one or more consecutive packets 
are scrambled using the same control word (CW) and 
wherein each packet includes a control word identifier 
identifying the control word used, and an encryption de- 
vice for providing entitlement control messages 
(ECM's), each ECM including at least a next control 
word (CWfg), characterized in that the ECM encryption 
device provides ECM's including a previous control 
word (CWp), a current control word (CWq) and a next 
control word (CW^). 

[0006] In a second aspect of the invention a system 
for descrambling scrambled content is provided, com- 
prising a descrambler for descrambling the scrambled 
content, a decryption device for decrypting ECM's to ob- 
tain control words, wherein the ECM decryption device 
delivers control words to the descrambler, wherein the 
descrambler descrambles the data packets of the 
scrambled content using a control word having a control 
word identifier corresponding with the control word iden- 
tifier of the data packet to be descrambled, the system 
further comprising a storage device for storing scram- 
bled content and a processing unit with means to control 
playback of the stored content, going fast forward and 



going backwards, wherein the processing unit is pro- 
grammed to extract ECM's and to provide the ECM's to 
the ECM decryption device for decryption, character- 
ized in that the processing unit is programmed to re- 
5 quest the ECM decryption device to provide at least a 
- next control word [C\N^) at play back or going fast for- 
ward, and to provide at least a previous control word 
(CWp) and a current control word (CWc) at going back- 
wards. 

10 [0007] By providing entitlement control messages 
with three control words, i.e. the current, next and pre- 
vious control words, the receiving apparatus can play- 
back stored content from disc in a normal manner, 
wherein further fast forward and rewind functions are 

15 available. When the receiving apparatus is going back- 
wards through the content, the processing unit picks up 
the first ECM it finds, sends the ECM to the ECM de- 
cryption device and requests the decryption device to 
deliver current and previous keys and loads these keys 

20 into the descrambler Processing the ECM's and syn- 
chronizing the provision of control words is relatively 
simple in this manner 

[0008] The invention will be further explained by ref- 
erence to the drawings in which an embodiment of the 

25 systems of the invention is shown. 

[0009] Fig. 1 shows a simplified diagram of embodi- 
ments of the system for providing scrambled content 
and the system for descrambling scrambled content ac- 
cording to the invention. 

30 [0010] Fig. 2 shows a diagram to explain the operation 
of the systems of the invention. 

[0011] Fig. 1 shows a system 1 for providing scram- 
bled content comprising a control word generator 2 and 
a scrambler 3. The scrambler 3 receives clear content 

35 and delivers content scrambled using the control words 
provided by the control word generator 2 as encryption 
keys. The control word generator provides a new control 
word every ten seconds for example. As is well-known 
in the art, the control words are generally used as a seed 

"^0 for a pseudo-random binary sequence generator, 
wherein the output of the PRBS generator is used for 
scrambling the clear content. Of course other scramble 
systems such as a block cypher system may also be 
used. As such scrambling systems are known per se, 

45 this is not discussed in detail in this specification as it is 
not part of the present invention. Each control word CW 
has an associated control word identifier, which in case 
of the generally used MPEG system is only one bit, i.e. 
either a zero or a one. In a corresponding manner the 

50 same control word identifier, i.e. a zero or a one, is as- 
sociated with each scrambled data packet or plurality of 
scrambled data packets scrambled under the control of 
the control word having the same associated identifier 
zero or one. 

55 [0012] The control words CWq and CW., are also de- 
livered to an ECM encryption device 4 which encrypts 
the control words using an input key P. The encryption 
device 4 can be made as a smart card. The encrypted 
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ECM's with the control words are inserted into the 
scrannbled content and broadcasted or delivered in any 
other manner to a number of subscribers each having 
a system 5 for descrambling scrambled content. 
[001 3] It is noted that the key P used by the encryption 
device 4 can be transferred to the systems 5 in so-called 
entitlement management messages which are not 
shown in fig. 1. Conditional access systems operating 
with such a hierarchy of keys are known per se and are 
not further described in this specification. 
[0014] The descrambling system 5 comprises a de- 
scrambler 6 for descrambling the scrambled content 
and a decryption device 7 for decrypting ECM's to obtain 
the control words CW. This device 7 can be made as a 
smart card. Further, the system 5 comprises a process- 
ing unit 8 controlling the operation of the system and 
having a schematically indicated control means 9 allow- 
ing control of the system by the user. The scrambled 
content is received by the processing unit 8 and can be 
stored on a storage device 10. for example a hard disc 
with large capacity. The processing unit 8 forwards the 
scrambled content to the descrambler 6 and extracts the 
ECM's from the stream and forwards the ECM's to the 
decryption device 7. The decryption device 7, generally 
made as a secure device such as a smart card, decrypts 
the ECM's received and as controlled by the processing 
unit 8 delivers the control words CWq, CW^ to the de- 
scrambler 6. If a data packet with the control word iden- 
tifier 0 is received the control word CWq is used, if a data 
packet having the control word identifier 1 is received, 
the control word CW^ is used. 

[001 5] In the known conditional access system either 
the current control word CWq and the next control word 
CWfj is included in the ECM's or only the next control 
word CWfj. The decryption device 7 decrypts the control 
words and loads the control words into the descrambler 
6. As stated above, the data packets passing the de- 
scrambler 6 have corresponding control word identifiers 
indicating which control word CW^ or CWq to use. In nor- 
mal use, when only going forward, an ECM is extracted 
from the stream and will at least contain the control word 
CW^ or CWq to be used at the next transition from iden- 
tifier 1 to 0 in the data packet stream. However when 
going backwards through the data stream, the ECM at 
any location will not have the control word CWp for the 
previous data packet. This means that the processing 
unit 8 must look further back then the current data pack- 
et being processed by the descrambler in order to find 
a previous ECM. This would require an intensive oper- 
ation and would mean a high load on the processing ca- 
pacity of the system 5. 

[0016] According to the invention, this problem of lo- 
cating an ECM in the data stream is avoided by including 
in the ECM's three keys, i.e. the previous control word 
CWp, the cun-ent control word CWq and the next control 
word CWjg. In this manner each ECM extracted from the 
stream by the processing unit 8 at play back of the con- 
tent stored on the disc 10 contains three control words, 



including the control word required for descrambling the 
previous data packet. In this manner a rewind function 
is supported in an easy manner so that the user can 
scroll back through the content retrieved from the stor- 
5 age device 10 using the control means 9. Of course, 
such control means may include a remote control de- 
vk:e. 

[0017] An illustration of the operation of the systems 
of the invention is schematically shown in fig. 2. A con- 

10 tent stream with data packets A, B, C and D is shown, 
wherein it is assumed that data packet A has the control 
word identifier 0, the data packet B the identifier 1 , the 
data packet C the identifier 0 etc. The ECM stream is 
shown above the data packet stream. As indicated, a 

'5 new ECM is extracted from the stream shortly before a 
transition from data packet A to B, from B to C etc. The 
ECM extracted from the data stream shortly before the 
beginning of data packet A, includes the previous con- 
trol word CWp^, the current control word CW^^^, and the 

^0 next control word CW^i . The next ECM includes the pre- 
vious control word CW^o. the current control word CWg^ 
and the next control word CW^o- During normal play- 
back, the processing unit 8 will extract the ECM's sub- 
sequently from the data stream and will send the ECM's 

25 to the decryption device 7. The processing unit 8 will 
request the decryption device 7 to send the current con- 
trol word CW^o and the next control word CWg, to the 
descrambler 6. The descrambler 6 receiving the data 
packet A with identifier 0, will use the control word CW^q 

30 to descramble this data packet. At the transition from 
data packet A to data packet B, the new identifier 1 in- 
dicates the descrambler 6 to use the control word CWq^ . 
The same operation applies to the fast fonvard mode 
wherein the processing unit8 will request the decryption 

35 device 7 to send the current and next control words to 
the descrambler 6. 

[001 8] If the user operates the control means 9 for go- 
ing backwards, I.e. a VCR-like rewind function, the 
processing unit 8 instructs the decryption device 7 to 

40 provide the current control word CW^^, and previous 
control word CWp^. In this manner the descrambler 6 
can descramble the previous data packet. 
[0019] In the above example it is indicated that the 
ECM's are stored as part of the content. It is also pos- 

^5 sible to store the ECM's separately with timing informa- 
tion. In this case timing information in the content stream 
is used by the processing unit 8 to extract or retrieve the 
correct ECM's from the storage device 10. 
[0020] From the above it will be understood that the 

50 invention provides systems, wherein going backwards 
through the stored video content is allowed without any 
significant increase in the load on the processing unit in 
processing ECM's and synchronizing control words. It 
will be clear that the invention can be used with any type 

55 of video or audio content. 

[0021 ] The invention is not restricted to the above de- 
scribed embodiments which can be varied in a number 
of ways within the scope of the attached claims. 
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Claims 

1. System for providing scrambled content, compris- 
ing a control word generator, each control word in- 
cluding a control word identifier, a scrambler for pro- 5 
viding a stream of scrambled data packets, wherein 
one or more consecutive packets are scrambled us- 
ing the same control word (CW) and wherein each 
packet includes a control word identifier identifying 
the control word used, and an encryption device for io 
providing entitlement control messages (ECM's), 
each ECM including at least a next control word 
(CW|g), characterized in that the ECM encryption 
device provides ECM's including a previous control 
word (CWp), a current control word (CWq) and a '5 
next control word {CW^). 

2. System according to claim 1 , wherein the ECM en- 
cryption device is accommodated in a smart card. 

20 

3. System for descrambling scrambled content, com- 
prising a descrambler for descrambling the scram- 
bled content, a decryption device for decrypting 
ECM's to obtain control words, wherein the ECM 
decryption device delivers control words to the de- 
scrambler, wherein the descrambler descrambles 
the data packets of the scrambled content using a 
control word having a control word identifier corre- 
sponding with the control word identifier of the data 
packet to be descrambled, the system further com- so 
prising a storage device for storing scrambled con- 
tent and a processing unit with means to control 
play back of the stored content, going fast forward 
and going backwards, wherein the processing unit 

is programmed to extract ECM's and to provide the 35 
ECM's to the ECM decryption device for decryption, 
characterized in that the processing unit is pro- 
grammed to request the ECM decryption device to 
provide at least a next control word (CW|g) at play 
back or going fast forward, and to provide at least 40 
a previous control word (CWp) and a current control 
word (CWc) at going backwards. 

4. System according to claim 3, wherein the process- 
ing unit is programmed to request the ECM decryp- ^5 
tion device to provide the current control word 
(CWq) together with a next control word (CWj^) at 
playback or going fast forward and to provide the 
current control word (CWq) together with a previous 
control word (CWp) at going backwards. so 

5. System according to claim 3 or 4. wherein the ECM 
decryption device is accommodated in a smart 
card. 
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Fig. 1 
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